Terms of Engagement
A summary of how every Risk3 engagement is structured. The full terms are set out in the engagement letter issued before any work begins. Nothing here is unusual, which is the point: you should know the shape of the agreement before you make the first call.
Before engagement
Conflict check first. Every enquiry is conflict-checked before matter detail is taken. If a conflict exists we decline, and we disclose the fact of the enquiry to no one.
Written scope, fixed fee. Work is quoted as a fixed fee against a written scope: environments, methodology, schedule and deliverables. Scope changes are agreed in writing before additional work proceeds. We do not charge contingency or success fees. Findings must be independent of what we are paid.
Free initial consultation. The first consultation carries no fee and no obligation, and is covered by the same confidentiality as an engagement.
During engagement
Confidentiality. Mutual confidentiality undertakings are included in every engagement letter and survive its termination indefinitely. We do not reference clients or engagements, publicly or privately, without written consent. NDAs on your paper are accepted.
Lawful means only. We inspect premises, vehicles and devices that you own, control or are authorised to submit for inspection. We do not conduct surveillance, and we decline instructions requiring unlawful access in any jurisdiction.
Counsel direction. Where a matter is or may become contentious, engagements can be structured under direction of external counsel to preserve legal professional privilege. We advise on this structuring at the outset.
Evidence. Discovered devices and related material are handled to documented chain-of-custody standards. Decisions about preservation, exploitation or removal rest with you, on our advice.
After engagement
Deliverables. Engagements conclude with a written report to the standard described in the Risk3 Protocol. Reports are addressed to the client and, where directed, to counsel.
Materials. Engagement material is returned or destroyed at conclusion as the engagement letter directs, subject to any legal hold.
Insurance and liability. Risk3 maintains professional indemnity insurance. Certificate details are available to clients on request. Liability provisions are set out in the engagement letter.
Complaints. Concerns are handled by the practice principal under the procedure included in every engagement letter.
This website
Content on tscm.com.hk is general information, not advice on any specific matter, legal or otherwise. Case studies are anonymised and composited to protect client confidentiality. The lessons are reported accurately. Site content may be quoted with attribution.
Risk3 Consulting Limited is registered in Hong Kong, CR No. 0781250. Last reviewed: July 2026.